CVE-2022-28094

MediumCVSS 6.1

Published: 25/04/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.66%

47th percentile - higher than 47% of all known CVEs

Summary

SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the fid parameter at booking.php.

Risk Assessment

An attacker can inject malicious JavaScript code, potentially leading to user session theft, account takeover, or display of fraudulent content.

Recommendation

Update the system to the latest version or implement input filtering and validation for the fid parameter in booking.php.

Original NVD description (English source)

SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the fid parameter at booking.php.